last executing test programs:

7.970717667s ago: executing program 1 (id=1556):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket(0x2, 0x80805, 0x0)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10)
getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000001080)=0x8)
getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x6, &(0x7f0000000280)={r2, @in={{0x2, 0x4e20, @local}}}, &(0x7f0000000340)=0x84)

7.970241959s ago: executing program 1 (id=1558):
r0 = socket$inet6_tcp(0xa, 0x1, 0x0)
setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x3c0, 0x210, 0x9403, 0x3002, 0x210, 0x2c0, 0x2f0, 0x3d8, 0x3d8, 0x2f0, 0x3d8, 0x3, 0x0, {[{{@ipv6={@private2, @remote, [0xffffff00, 0x0, 0xffffffff], [0xffffffff, 0xffffff00, 0xffffffff], 'macvlan1\x00', 'wg2\x00', {}, {0xa4c8dd0ffa9b1578}, 0x73, 0x9, 0x4, 0x48}, 0x0, 0x1c8, 0x210, 0x0, {}, [@inet=@rpfilter={{0x28}, {0xc}}, @common=@inet=@recent0={{0xf8}, {0x0, 0x80, 0x1, 0x0, 'syz0\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1}}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x0, 0x2}, {0x4, 0x5, 0x5}, {0x3, 0x4}, 0xbf, 0xb}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x47b)

7.920104224s ago: executing program 1 (id=1560):
bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x2, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800000004fe0000000000f0070003851000000600000018"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x1e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94)
r0 = socket$kcm(0x10, 0x400000002, 0x0)
write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[@ANYBLOB="33fe0000240013"], 0xfe33)

7.846375975s ago: executing program 1 (id=1563):
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200000002"], 0x10)
r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10)
r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x94)
r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10)
r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8)
close(r6)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70)
r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r8, r7, 0x2, 0x6, 0x4000}, 0x10)

7.845816737s ago: executing program 1 (id=1566):
r0 = socket$nl_route(0x10, 0x3, 0x0)
ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', <r1=>0x0})
sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="7000000010000100000000180000000000000000", @ANYRES32=r1, @ANYBLOB="000000002f95abbe480012800e0001006970366772657461700000003400028008000100", @ANYRES32=r1, @ANYBLOB="14000600fe80000000000000000000000000000014000700ff050000000000000000000000000001080004"], 0x70}}, 0x0)

7.590839077s ago: executing program 1 (id=1576):
r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0)
ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2})
ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x35, 0x0, 0x3, 0xff9f0007}]})

789.176508ms ago: executing program 0 (id=1656):
sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001200)={0x0}}, 0x0)
bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7c, 0x7c, 0x2, [@var, @func_proto={0x0, 0x6, 0x0, 0xd, 0x0, [{}, {}, {}, {}, {}, {}]}, @func, @volatile, @volatile, @volatile={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x96}, 0x20)
r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20)
r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000002000000000000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0xe2, &(0x7f00000002c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x80)
bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000a00)={r1, 0xd8, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001000), 0x8, 0x0, 0x8, 0x0, 0x0}}, 0x10)

789.032679ms ago: executing program 0 (id=1657):
r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48)
writev(r0, &(0x7f0000004d40)=[{&(0x7f00000039c0)="71cce60be1", 0x5}, {0x0}], 0x2)

735.021196ms ago: executing program 0 (id=1659):
r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50)
r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x20, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000007000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000180100002020737200000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90)
bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c)

658.416133ms ago: executing program 0 (id=1661):
r0 = socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0)
ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', <r2=>0x0})
sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8f, 0x1, 0xa9, 0x9, 0x5, 0xfffe, 0x2, 0x100]}}]}]}]}, 0x38}}, 0x0)

658.085672ms ago: executing program 0 (id=1662):
r0 = socket$phonet(0x23, 0x2, 0x1)
sendto$phonet(r0, 0x0, 0xfffffffffffffd4a, 0x4000, &(0x7f0000000480)={0x23, 0x81, 0x8, 0x6}, 0x10)

580.170228ms ago: executing program 0 (id=1663):
r0 = socket$inet6_sctp(0xa, 0x5, 0x84)
r1 = socket$inet6_sctp(0xa, 0x1, 0x84)
getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10)
getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={<r2=>0x0}, &(0x7f0000000180)=0x8)
getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000080)={r2, 0x4}, &(0x7f0000000180)=0x8)

229.851622ms ago: executing program 2 (id=1665):
socket$kcm(0x2, 0x3, 0x2)
bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x41}, @printk={@lli, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
r0 = socket$inet6_udp(0xa, 0x2, 0x0)
bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c)
socket$pppl2tp(0x18, 0x1, 0x1)
openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0)
socket$nl_route(0x10, 0x3, 0x0)
r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000004000000000000000000008500000050000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f00000003c0)='i2c_reply\x00', r1}, 0x10)
openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70)
r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90)
bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r2}, 0x10)
bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30)
openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0)
socket$inet_udp(0x2, 0x2, 0x0)
socket$can_raw(0x1d, 0x3, 0x1)
socket$nl_generic(0x10, 0x3, 0x10)
socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580))
socket$alg(0x26, 0x5, 0x0)
bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48)
r3 = socket$nl_generic(0x10, 0x3, 0x10)
r4 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff)
sendmsg$ETHTOOL_MSG_COALESCE_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff08000900fcfc0000080011000000000008000e00800000000800", @ANYRES64=r3], 0x5c}, 0x1, 0x0, 0x0, 0x20008005}, 0x0)

170.307004ms ago: executing program 2 (id=1666):
syz_emit_ethernet(0x62, &(0x7f0000000080)={@local, @random="1553ff41cf11", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dda00", 0x2c, 0x6, 0x0, @private1={0xfc, 0x1, '\x00', 0x2}, @mcast2, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xb, 0x2, 0x0, 0x0, 0x0, {[@generic={0x22, 0x2}, @generic={0x4, 0x3, "a8"}, @mptcp=@generic={0x1, 0x10, "eea2fe5701b9d5f0b8b225196ae6"}]}}}}}}}}, 0x0)

169.959425ms ago: executing program 2 (id=1667):
r0 = socket$inet6_sctp(0xa, 0x801, 0x84)
setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000080)={0xbf, 0x99, 0x15, 0x5, 0xff, 0x5, 0xfb, 0x8, 0xec, 0x2, 0x81, 0x84, 0x8, 0x5}, 0xe)
sendto$inet6(r0, &(0x7f0000000040)='T', 0x1, 0x8910, &(0x7f0000000280)={0xa, 0xfffc, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c)
shutdown(r0, 0x1)
recvmmsg(r0, &(0x7f0000001f40)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)=""/125, 0x7d}], 0x1}, 0x4}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000004c0)=""/189, 0xbd}], 0x1}, 0x7f}, {{0x0, 0x0, 0x0}, 0x2}], 0x3, 0x400300c1, 0x0)

60.727413ms ago: executing program 2 (id=1668):
r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1)
setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000300)=@nat={'nat\x00', 0x670, 0x5, 0x328, 0xa8, 0x168, 0xfeffffff, 0x168, 0x240, 0x2e8, 0x2e8, 0xffffffff, 0x2e8, 0x2e8, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'geneve1\x00', 'geneve0\x00'}, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x9, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28}}, {{@ip={@multicast2, @multicast2, 0xffffff00, 0x0, 'nr0\x00', 'geneve1\x00', {}, {0xff}, 0x4, 0x0, 0x55}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@ip={@private, @local, 0x0, 0x0, 'veth1_virt_wifi\x00', 'pim6reg0\x00', {}, {}, 0x88}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @multicast1, @loopback, @port, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x388)

60.536012ms ago: executing program 2 (id=1669):
r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0)
sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="e0000000", @ANYRES16=r1, @ANYBLOB="010000000000000000000100000008000100000000001400048005000300070000000500030001000000080002"], 0xe0}}, 0x0)

0s ago: executing program 2 (id=1670):
r0 = socket$kcm(0x10, 0x2, 0x10)
sendmsg$kcm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394", 0xf}], 0x1}, 0x0)
r1 = socket$nl_route(0x10, 0x3, 0x0)
r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff)
r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10)
r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff)
socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={<r6=>0xffffffffffffffff, <r7=>0xffffffffffffffff})
sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f00000000c0)={0x30, r5, 0x1, 0xffffffff, 0x0, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x4}, @NBD_ATTR_SOCKETS={0x10, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r6}}]}]}, 0x30}}, 0x20000000)
sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r3, 0x1, 0x70bd27, 0x25dfdbfc, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24040090}, 0xc0)
bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48)
r8 = socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000001640)={0x0, 'veth0_to_hsr\x00', {0x3}, 0x4})
bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8)
bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x11, 0xf, &(0x7f00000002c0)=ANY=[@ANYRES32=r7, @ANYBLOB="a769ed16d431d963eff6c2d0f9113babb7ce9c9a317adc5c255123c8c3280fb83d7ef6e4571bc229479c5d4ca1cdbc9823e0e294d603260f4c32ea85c3a4dd6ec71e005b8576568eeb12745cf1951e0e61"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94)
sendmsg$NLBL_MGMT_C_ADD(r2, &(0x7f0000000440)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x64, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @rand_addr=' \x01\x00'}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @remote}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev={0xfe, 0x80, '\x00', 0x13}}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0xa}]}, 0x64}, 0x1, 0x0, 0x0, 0x20004010}, 0x400c000)
socket$nl_xfrm(0x10, 0x3, 0x6)
ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x0, 'wlan0\x00', {0x1}, 0x10})

kernel console output (not intermixed with test programs):

Warning: Permanently added '[localhost]:22220' (ED25519) to the list of known hosts.
syzkaller login: [   41.043842][ T5737] cgroup: Unknown subsys name 'net'
[   41.182922][ T5737] cgroup: Unknown subsys name 'cpuset'
[   41.186541][ T5737] cgroup: Unknown subsys name 'rlimit'
Setting up swapspace version 1, size = 127995904 bytes
[   42.648580][ T5737] Adding 124996k swap on ./swap-file.  Priority:0 extents:1 across:124996k 
[   46.147645][ T5202] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[   46.151673][ T5202] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[   46.154719][ T5202] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[   46.158733][ T5202] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[   46.163418][ T5202] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[   46.201139][   T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1
[   46.204758][   T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9
[   46.207692][   T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9
[   46.211360][   T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4
[   46.214301][   T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2
[   46.261337][ T5202] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1
[   46.264666][ T5202] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9
[   46.267602][ T5202] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9
[   46.271234][ T5202] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4
[   46.274023][ T5202] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2
[   46.444669][ T5809] chnl_net:caif_netlink_parms(): no params data found
[   46.459113][ T5815] chnl_net:caif_netlink_parms(): no params data found
[   46.628980][ T5809] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.632219][ T5809] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.634676][ T5809] bridge_slave_0: entered allmulticast mode
[   46.637748][ T5809] bridge_slave_0: entered promiscuous mode
[   46.673327][ T5809] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.675733][ T5809] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.677992][ T5809] bridge_slave_1: entered allmulticast mode
[   46.681084][ T5809] bridge_slave_1: entered promiscuous mode
[   46.694585][ T5815] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.697737][ T5815] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.701653][ T5815] bridge_slave_0: entered allmulticast mode
[   46.704387][ T5815] bridge_slave_0: entered promiscuous mode
[   46.709457][ T5815] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.712243][ T5815] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.714548][ T5815] bridge_slave_1: entered allmulticast mode
[   46.717235][ T5815] bridge_slave_1: entered promiscuous mode
[   46.726472][ T5817] chnl_net:caif_netlink_parms(): no params data found
[   46.745909][ T5809] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.751893][ T5815] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   46.763027][ T5815] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.768550][ T5809] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   46.817716][ T5809] team0: Port device team_slave_0 added
[   46.821497][ T5815] team0: Port device team_slave_0 added
[   46.824339][ T5809] team0: Port device team_slave_1 added
[   46.834987][ T5815] team0: Port device team_slave_1 added
[   46.866397][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.868757][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.877309][ T5809] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.882384][ T5809] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.884699][ T5809] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.893019][ T5809] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   46.917228][ T5817] bridge0: port 1(bridge_slave_0) entered blocking state
[   46.919569][ T5817] bridge0: port 1(bridge_slave_0) entered disabled state
[   46.922845][ T5817] bridge_slave_0: entered allmulticast mode
[   46.925620][ T5817] bridge_slave_0: entered promiscuous mode
[   46.929679][ T5817] bridge0: port 2(bridge_slave_1) entered blocking state
[   46.932399][ T5817] bridge0: port 2(bridge_slave_1) entered disabled state
[   46.934773][ T5817] bridge_slave_1: entered allmulticast mode
[   46.937431][ T5817] bridge_slave_1: entered promiscuous mode
[   46.941628][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_0
[   46.943806][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.952071][ T5815] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   46.969817][ T5815] batman_adv: batadv0: Adding interface: batadv_slave_1
[   46.972113][ T5815] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   46.981057][ T5815] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.001959][ T5817] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[   47.007006][ T5817] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[   47.050979][ T5809] hsr_slave_0: entered promiscuous mode
[   47.054243][ T5809] hsr_slave_1: entered promiscuous mode
[   47.067893][ T5815] hsr_slave_0: entered promiscuous mode
[   47.070567][ T5815] hsr_slave_1: entered promiscuous mode
[   47.072754][ T5815] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.075273][ T5815] Cannot create hsr debugfs directory
[   47.078518][ T5817] team0: Port device team_slave_0 added
[   47.082921][ T5817] team0: Port device team_slave_1 added
[   47.137100][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_0
[   47.140518][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.151417][ T5817] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[   47.182757][ T5817] batman_adv: batadv0: Adding interface: batadv_slave_1
[   47.185691][ T5817] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[   47.197326][ T5817] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[   47.297096][ T5817] hsr_slave_0: entered promiscuous mode
[   47.299354][ T5817] hsr_slave_1: entered promiscuous mode
[   47.302767][ T5817] debugfs: Directory 'hsr0' with parent 'hsr' already present!
[   47.305262][ T5817] Cannot create hsr debugfs directory
[   47.435672][ T5815] netdevsim netdevsim0 netdevsim0: renamed from eth0
[   47.465444][ T5815] netdevsim netdevsim0 netdevsim1: renamed from eth1
[   47.473495][ T5815] netdevsim netdevsim0 netdevsim2: renamed from eth2
[   47.490805][ T5815] netdevsim netdevsim0 netdevsim3: renamed from eth3
[   47.520016][ T5809] netdevsim netdevsim1 netdevsim0: renamed from eth0
[   47.524875][ T5809] netdevsim netdevsim1 netdevsim1: renamed from eth1
[   47.532311][ T5809] netdevsim netdevsim1 netdevsim2: renamed from eth2
[   47.550025][ T5809] netdevsim netdevsim1 netdevsim3: renamed from eth3
[   47.570770][ T5817] netdevsim netdevsim2 netdevsim0: renamed from eth0
[   47.577983][ T5817] netdevsim netdevsim2 netdevsim1: renamed from eth1
[   47.586624][ T5817] netdevsim netdevsim2 netdevsim2: renamed from eth2
[   47.591800][ T5817] netdevsim netdevsim2 netdevsim3: renamed from eth3
[   47.684018][ T5809] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.691125][ T5815] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.710863][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0
[   47.719672][ T5809] 8021q: adding VLAN 0 to HW filter on device team0
[   47.732508][ T5817] 8021q: adding VLAN 0 to HW filter on device team0
[   47.736386][ T5815] 8021q: adding VLAN 0 to HW filter on device team0
[   47.743138][  T792] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.745546][  T792] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.754767][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.757194][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.761255][   T27] bridge0: port 1(bridge_slave_0) entered blocking state
[   47.763870][   T27] bridge0: port 1(bridge_slave_0) entered forwarding state
[   47.778045][  T792] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.780616][  T792] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.787018][  T792] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.789338][  T792] bridge0: port 2(bridge_slave_1) entered forwarding state
[   47.798688][  T792] bridge0: port 2(bridge_slave_1) entered blocking state
[   47.801270][  T792] bridge0: port 2(bridge_slave_1) entered forwarding state
[   48.021707][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.030780][ T5815] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.071727][ T5817] veth0_vlan: entered promiscuous mode
[   48.086832][ T5817] veth1_vlan: entered promiscuous mode
[   48.113999][ T5809] 8021q: adding VLAN 0 to HW filter on device batadv0
[   48.126098][ T5815] veth0_vlan: entered promiscuous mode
[   48.138624][ T5817] veth0_macvtap: entered promiscuous mode
[   48.143416][ T5817] veth1_macvtap: entered promiscuous mode
[   48.154798][ T5815] veth1_vlan: entered promiscuous mode
[   48.158821][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.175074][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.183345][ T5817] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.186228][ T5817] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.189117][ T5817] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.193478][ T5817] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.214711][ T5809] veth0_vlan: entered promiscuous mode
[   48.221526][ T5202] Bluetooth: hci0: command tx timeout
[   48.236225][ T5809] veth1_vlan: entered promiscuous mode
[   48.241734][ T5815] veth0_macvtap: entered promiscuous mode
[   48.247939][ T5815] veth1_macvtap: entered promiscuous mode
[   48.288066][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.300402][   T54] Bluetooth: hci1: command tx timeout
[   48.301606][ T5815] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.302954][ T5202] Bluetooth: hci2: command tx timeout
[   48.306312][ T5815] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.312073][ T5815] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.314770][ T5815] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.317465][ T5815] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.330316][   T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.333795][ T5809] veth0_macvtap: entered promiscuous mode
[   48.333945][   T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.343112][ T5809] veth1_macvtap: entered promiscuous mode
[   48.368641][   T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.372785][   T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.378972][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_0
[   48.388303][ T5809] batman_adv: batadv0: Interface activated: batadv_slave_1
[   48.403174][ T5809] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[   48.405919][ T5809] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[   48.408638][ T5809] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[   48.413859][ T5809] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[   48.450262][ T5817] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality.
[   48.458830][  T792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.464386][  T792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.501477][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.504194][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.515253][ T5876] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4'.
[   48.543167][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.551751][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.581626][ T5880] netlink: 'syz.2.6': attribute type 1 has an invalid length.
[   48.584397][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'.
[   48.587332][ T5880] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'.
[   48.590929][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[   48.594617][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[   48.705568][ T5890] netlink: 10 bytes leftover after parsing attributes in process `syz.2.9'.
[   48.744409][ T5892] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET)
[   48.920002][ T5908] netlink: 4 bytes leftover after parsing attributes in process `syz.2.17'.
[   49.006185][ T5918] bridge0: port 3(gretap0) entered blocking state
[   49.008336][ T5918] bridge0: port 3(gretap0) entered disabled state
[   49.019329][ T5918] gretap0: entered allmulticast mode
[   49.031691][ T5918] gretap0: entered promiscuous mode
[   49.034352][ T5918] bridge0: port 3(gretap0) entered blocking state
[   49.037085][ T5918] bridge0: port 3(gretap0) entered forwarding state
[   49.055656][ T5918] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.092877][ T5925] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list
[   49.135305][ T5930] netlink: 104 bytes leftover after parsing attributes in process `syz.2.29'.
[   49.249556][ T5939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.33'.
[   49.402662][ T5952] netlink: 28 bytes leftover after parsing attributes in process `syz.1.39'.
[   49.405448][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.1.39'.
[   49.424450][ T5952] netlink: 'syz.1.39': attribute type 10 has an invalid length.
[   49.427258][ T5952] bridge0: port 3(team0) entered blocking state
[   49.429392][ T5952] bridge0: port 3(team0) entered disabled state
[   49.434516][ T5952] team0: entered allmulticast mode
[   49.436213][ T5952] team_slave_0: entered allmulticast mode
[   49.438465][ T5952] team_slave_1: entered allmulticast mode
[   49.443079][ T5952] team0: entered promiscuous mode
[   49.444951][ T5952] team_slave_0: entered promiscuous mode
[   49.447059][ T5952] team_slave_1: entered promiscuous mode
[   49.449545][ T5952] bridge0: port 3(team0) entered blocking state
[   49.451780][ T5952] bridge0: port 3(team0) entered forwarding state
[   49.488406][ T5956] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic
[   49.526616][   T10] IPVS: starting estimator thread 0...
[   49.610708][ T5961] IPVS: using max 81 ests per chain, 194400 per kthread
[   49.731186][ T5982] netlink: 8 bytes leftover after parsing attributes in process `syz.1.53'.
[   49.734044][ T5982] netlink: 'syz.1.53': attribute type 6 has an invalid length.
[   49.785296][ T5985] xt_CT: No such helper "snmp"
[   49.870536][ T5992] netlink: 'syz.0.57': attribute type 1 has an invalid length.
[   49.873279][ T5992] netlink: 'syz.0.57': attribute type 2 has an invalid length.
[   49.875761][ T5992] netlink: 'syz.0.57': attribute type 3 has an invalid length.
[   49.922410][ T5996] tipc: Started in network mode
[   49.924478][ T5996] tipc: Node identity 5ad3494bd91b, cluster identity 4711
[   49.927512][ T5996] tipc: Enabled bearer <eth:syzkaller0>, priority 0
[   49.931227][ T5996] syzkaller0: entered promiscuous mode
[   49.932981][ T5996] syzkaller0: entered allmulticast mode
[   49.961184][ T5996] tipc: Resetting bearer <eth:syzkaller0>
[   49.964778][ T5995] tipc: Resetting bearer <eth:syzkaller0>
[   49.979600][ T5995] tipc: Disabling bearer <eth:syzkaller0>
[   49.991084][ T6002] netdevsim netdevsim0 : renamed from netdevsim0 (while UP)
[   50.101048][ T6014] ip6t_REJECT: TCP_RESET illegal for non-tcp
[   50.315329][ T5202] Bluetooth: hci0: command tx timeout
[   50.391759][   T54] Bluetooth: hci1: command tx timeout
[   50.393569][ T5202] Bluetooth: hci2: command tx timeout
[   51.198496][ T6094] veth0_to_bond: entered allmulticast mode
[   51.244716][ T6098] ip6t_srh: unknown srh match flags  4000
[   51.323901][ T6106] veth0: entered promiscuous mode
[   51.689328][ T6144] Cannot find add_set index 2 as target
[   51.783141][ T6153] xt_CT: You must specify a L4 protocol and not use inversions on it
[   51.785364][ T6150] Zero length message leads to an empty skb
[   51.896931][ T6162] openvswitch: netlink: Key type 30 is not supported
[   52.254086][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state
[   52.381086][ T5202] Bluetooth: hci0: command tx timeout
[   52.437727][ T6217] warning: `syz.2.132' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211
[   52.460416][ T5202] Bluetooth: hci2: command tx timeout
[   52.462778][   T54] Bluetooth: hci1: command tx timeout
[   52.855815][ T6256] 8021q: adding VLAN 0 to HW filter on device bond1
[   52.858355][ T6256] bridge0: port 3(bond1) entered blocking state
[   52.862882][ T6256] bridge0: port 3(bond1) entered disabled state
[   52.865995][ T6256] bond1: entered allmulticast mode
[   52.869403][ T6256] bond1: entered promiscuous mode
[   52.873255][ T6256] bridge0: port 3(bond1) entered blocking state
[   52.875610][ T6256] bridge0: port 3(bond1) entered forwarding state
[   52.913721][ T6256] dummy0: entered promiscuous mode
[   52.918465][ T6256] team0: entered promiscuous mode
[   52.920392][ T6256] team_slave_0: entered promiscuous mode
[   52.922572][ T6256] team_slave_1: entered promiscuous mode
[   52.927515][ T6256] bridge0: port 4(hsr1) entered blocking state
[   52.929851][ T6256] bridge0: port 4(hsr1) entered disabled state
[   52.932149][ T6256] hsr1: entered allmulticast mode
[   52.933997][ T6256] dummy0: entered allmulticast mode
[   52.935737][ T6256] team0: entered allmulticast mode
[   52.937472][ T6256] team_slave_0: entered allmulticast mode
[   52.939467][ T6256] team_slave_1: entered allmulticast mode
[   52.946178][ T6256] hsr1: entered promiscuous mode
[   52.948214][ T6256] bridge0: port 4(hsr1) entered blocking state
[   52.950385][ T6256] bridge0: port 4(hsr1) entered forwarding state
[   52.963518][   T28] bridge0: port 3(bond1) entered disabled state
[   53.615912][ T6294] __nla_validate_parse: 13 callbacks suppressed
[   53.615925][ T6294] netlink: 28 bytes leftover after parsing attributes in process `syz.1.151'.
[   53.760286][ T6335] delete_channel: no stack
[   54.051176][ T6358] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.173'.
[   54.102706][ T6361] netlink: 'syz.1.172': attribute type 1 has an invalid length.
[   54.105503][ T6361] netlink: 244 bytes leftover after parsing attributes in process `syz.1.172'.
[   54.213124][ T6374] netlink: 'syz.2.179': attribute type 9 has an invalid length.
[   54.337313][ T6390] netlink: 44 bytes leftover after parsing attributes in process `syz.2.187'.
[   54.460119][ T5202] Bluetooth: hci0: command tx timeout
[   54.550254][ T5202] Bluetooth: hci2: command tx timeout
[   54.553815][   T54] Bluetooth: hci1: command tx timeout
[   54.975646][ T6451] Bluetooth: MGMT ver 1.23
[   55.004938][ T6453] netlink: 236 bytes leftover after parsing attributes in process `syz.1.216'.
[   55.137792][ T6463] xt_bpf: check failed: parse error
[   55.362833][ T6477] lo speed is unknown, defaulting to 1000
[   55.365330][ T6477] lo speed is unknown, defaulting to 1000
[   55.369382][ T6477] lo speed is unknown, defaulting to 1000
[   55.386309][ T6477] iwpm_register_pid: Unable to send a nlmsg (client = 2)
[   55.415270][ T6477] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98
[   55.456329][ T6477] lo speed is unknown, defaulting to 1000
[   55.459013][ T6477] lo speed is unknown, defaulting to 1000
[   55.463239][ T6477] lo speed is unknown, defaulting to 1000
[   55.538685][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.1.234'.
[   55.589682][ T6496] netlink: 'syz.0.237': attribute type 1 has an invalid length.
[   55.811336][ T6520] netlink: 20 bytes leftover after parsing attributes in process `syz.2.248'.
[   55.989067][ T6534] tipc: Cannot configure node identity twice
[   56.103333][ T6522] lo speed is unknown, defaulting to 1000
[   56.293658][ T6555] netlink: 16 bytes leftover after parsing attributes in process `syz.0.263'.
[   56.519133][ T6573] tap0: tun_chr_ioctl cmd 1074025678
[   56.524039][ T6573] tap0: group set to 0
[   56.526534][ T6572] nbd: must specify a size in bytes for the device
[   56.671328][ T6581] x_tables: duplicate underflow at hook 4
[   56.701057][ T2288] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   56.783194][ T6595] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   56.835474][ T6597] vlan2: entered allmulticast mode
[   56.837495][ T6597] netdevsim netdevsim1 netdevsim0: entered allmulticast mode
[   57.062235][ T6605] netlink: 'syz.1.287': attribute type 72 has an invalid length.
[   57.073491][ T6605] netlink: 1016 bytes leftover after parsing attributes in process `syz.1.287'.
[   57.361880][ T6617] netlink: 64 bytes leftover after parsing attributes in process `syz.1.293'.
[   57.743299][  T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   57.929664][ T6652] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2
[   57.933032][ T6652] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0
[   58.220382][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   58.686180][ T6695] __nla_validate_parse: 4 callbacks suppressed
[   58.686196][ T6695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.328'.
[   58.784257][  T789] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   58.857636][ T6703] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0)
[   58.899681][ T6705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   58.903447][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   58.907644][ T6705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   58.911169][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   58.916052][ T6705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   58.919587][    C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   58.925680][ T6705] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   59.339441][ T6720] lo speed is unknown, defaulting to 1000
[   59.413585][ T6727] netlink: 'syz.2.344': attribute type 14 has an invalid length.
[   59.934007][ T5681] bond0: (slave bond_slave_0): interface is now down
[   59.936525][ T6764] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0)
[   59.941565][ T5681] bond0: (slave bond_slave_1): interface is now down
[   59.961537][ T5681] bond0: (slave bond_slave_0): interface is now down
[   59.964302][ T5681] bond0: (slave bond_slave_1): interface is now down
[   59.986093][ T5681] bond0: now running without any active interface!
[   60.053219][ T6771] ip6t_rpfilter: unknown options
[   60.078385][ T6772] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'.
[   60.084160][ T6772] netlink: 4 bytes leftover after parsing attributes in process `syz.1.362'.
[   60.098619][ T6774] bridge1: entered allmulticast mode
[   60.503648][ T6797] netlink: 24 bytes leftover after parsing attributes in process `syz.1.375'.
[   60.564672][ T6804] netlink: 12 bytes leftover after parsing attributes in process `syz.2.380'.
[   60.637194][ T6814] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   60.754077][ T6820] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.817133][ T6820] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.895090][ T6820] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   60.975374][ T6820] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   61.025621][ T6853] ieee802154 phy0 wpan0: encryption failed: -22
[   61.067644][ T6855] netlink: 'syz.0.403': attribute type 1 has an invalid length.
[   61.084627][ T6820] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   61.098389][ T6820] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   61.111555][ T6820] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   61.120780][ T6820] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   61.189096][ T6865] netlink: 8 bytes leftover after parsing attributes in process `syz.0.407'.
[   61.386496][ T6886] netlink: 20 bytes leftover after parsing attributes in process `syz.1.418'.
[   61.525014][ T6895] lo speed is unknown, defaulting to 1000
[   62.029292][ T6919] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.086981][ T6919] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.155803][ T6919] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.228732][ T6926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.433'.
[   62.230917][ T6919] netdevsim netdevsim0  (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[   62.240115][ T6926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.433'.
[   62.302513][ T6919] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0
[   62.311795][ T6919] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0
[   62.321967][ T6919] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0
[   62.332115][ T6919] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0
[   62.599012][ T6934] lo speed is unknown, defaulting to 1000
[   62.643707][ T5844] IPVS: starting estimator thread 0...
[   62.729888][ T6936] IPVS: using max 80 ests per chain, 192000 per kthread
[   62.745164][ T6939] netlink: 20 bytes leftover after parsing attributes in process `syz.1.435'.
[   62.791312][   T12] bond0: (slave bond_slave_1): link status definitely up, 10000 Mbps full duplex
[   62.795899][   T12] bond0: active interface up!
[   62.941329][ T5844] net_ratelimit: 2056 callbacks suppressed
[   62.941340][ T5844] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.291183][ T6980] netlink: 'syz.1.455': attribute type 18 has an invalid length.
[   63.325041][ T6982] siw: device registration error -23
[   63.350379][ T5858] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.425126][ T6988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.428391][ T6988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.437089][ T6988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.440801][ T6988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.444469][ T6988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.458333][ T6988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.464395][ T6988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.468572][ T6988] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog
[   63.589142][ T7000] netlink: 'syz.1.465': attribute type 3 has an invalid length.
[   63.595450][ T7000] netlink: 'syz.1.465': attribute type 1 has an invalid length.
[   63.905132][ T7022] __nla_validate_parse: 4 callbacks suppressed
[   63.905148][ T7022] netlink: 27 bytes leftover after parsing attributes in process `syz.2.474'.
[   63.985776][ T7029] netlink: 2 bytes leftover after parsing attributes in process `syz.0.477'.
[   63.989056][ T7029] batadv_slave_1: entered promiscuous mode
[   64.023651][ T7032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.478'.
[   64.071140][ T7034] Cannot find add_set index 3 as target
[   64.117686][ T7036] Illegal XDP return value 4294967274 on prog  (id 74) dev N/A, expect packet loss!
[   64.219923][ T5813] Bluetooth: hci2: command 0x0405 tx timeout
[   64.361584][ T7045] netlink: 'syz.0.485': attribute type 3 has an invalid length.
[   65.454793][ T7078] pim6reg1: entered promiscuous mode
[   65.456757][ T7078] pim6reg1: entered allmulticast mode
[   65.462723][ T7080] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0)
[   65.653905][ T7096] netlink: 4 bytes leftover after parsing attributes in process `syz.2.508'.
[   66.013911][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.525'.
[   66.096644][ T7141] netlink: 48 bytes leftover after parsing attributes in process `syz.1.529'.
[   66.408296][ T7177] lo speed is unknown, defaulting to 1000
[   66.533687][ T7190] netlink: 'syz.1.550': attribute type 1 has an invalid length.
[   66.536123][ T7190] netlink: 232 bytes leftover after parsing attributes in process `syz.1.550'.
[   66.778616][ T7195] lo speed is unknown, defaulting to 1000
[   66.854461][ T7206] netlink: 56 bytes leftover after parsing attributes in process `syz.0.557'.
[   67.162918][ T7227] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   68.018702][ T7246] netlink: 4 bytes leftover after parsing attributes in process `syz.2.574'.
[   68.438162][ T7289] netlink: 8 bytes leftover after parsing attributes in process `syz.1.594'.
[   68.544976][ T7304] lo: entered promiscuous mode
[   68.546598][ T7304] lo: entered allmulticast mode
[   68.555444][ T7304] net_ratelimit: 43 callbacks suppressed
[   68.555453][ T7304] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   68.609227][ T7313] IPVS: sync thread started: state = BACKUP, mcast_ifn = vlan0, syncid = 1, id = 0
[   68.614923][ T7309] IPVS: stopping backup sync thread 7313 ...
[   68.680778][ T7320] (unnamed net_device) (uninitialized): option ad_actor_system: mode dependency failed, not supported in mode balance-rr(0)
[   69.071113][ T7354] sctp: [Deprecated]: syz.0.626 (pid 7354) Use of struct sctp_assoc_value in delayed_ack socket option.
[   69.071113][ T7354] Use struct sctp_sack_info instead
[   69.166758][ T7366] tls_set_device_offload_rx: netdev not found
[   69.166944][ T7367] trusted_key: syz.2.633 sent an empty control message without MSG_MORE.
[   69.258081][ T7374] lo speed is unknown, defaulting to 1000
[   69.260339][ T5202] Bluetooth: hci2: command 0x0405 tx timeout
[   69.292459][ T7378] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   69.294913][ T7378] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   69.405536][ T7374] __nla_validate_parse: 4 callbacks suppressed
[   69.405551][ T7374] netlink: 20 bytes leftover after parsing attributes in process `syz.0.636'.
[   69.561954][ T7386] netlink: 24 bytes leftover after parsing attributes in process `syz.2.641'.
[   70.012626][ T7425] netlink: 4436 bytes leftover after parsing attributes in process `syz.0.658'.
[   70.016879][ T7425] x_tables: ip_tables: osf.0 match: invalid size 48 (kernel) != (user) 4096
[   70.204883][ T7443] hsr_slave_0: hsr_addr_subst_dest: Unknown node
[   70.207119][ T7443] hsr_slave_1: hsr_addr_subst_dest: Unknown node
[   70.748474][ T7456] netlink: 4 bytes leftover after parsing attributes in process `syz.2.670'.
[   71.139851][ T7467] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms)
[   71.143700][ T7467] bridge0: port 3(team0) entered disabled state
[   71.146659][ T7467] bridge0: port 2(bridge_slave_1) entered disabled state
[   71.149151][ T7467] bridge0: port 1(bridge_slave_0) entered disabled state
[   71.184942][ T1362] ieee802154 phy0 wpan0: encryption failed: -22
[   71.474382][ T7493] xt_hashlimit: size too large, truncated to 1048576
[   71.479209][ T7493] xt_hashlimit: max too large, truncated to 1048576
[   71.806957][ T7519] lo speed is unknown, defaulting to 1000
[   71.846030][ T7528] netlink: 'syz.2.700': attribute type 13 has an invalid length.
[   71.848572][ T7528] netlink: 'syz.2.700': attribute type 17 has an invalid length.
[   71.877825][ T7528] gretap0: refused to change device tx_queue_len
[   71.887232][ T7528] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check.
[   72.429116][ T7582] netlink: 32 bytes leftover after parsing attributes in process `syz.2.728'.
[   72.451786][ T7582] lo speed is unknown, defaulting to 1000
[   73.132369][ T7637] ip6t_srh: unknown srh invflags 4449
[   74.193388][ T7665] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   74.339513][ T2288] hid-generic 0005:0B57:00AA.0001: collection stack underflow
[   74.342458][ T2288] hid-generic 0005:0B57:00AA.0001: item 0 0 0 12 parsing failed
[   74.351105][ T2288] hid-generic 0005:0B57:00AA.0001: probe with driver hid-generic failed with error -22
[   74.426327][ T7690] netlink: 4 bytes leftover after parsing attributes in process `syz.2.772'.
[   74.437112][ T7689] syzkaller1: entered promiscuous mode
[   74.439165][ T7689] syzkaller1: entered allmulticast mode
[   74.498279][ T7694] netlink: 'syz.2.775': attribute type 1 has an invalid length.
[   74.508224][ T7694] netlink: 36 bytes leftover after parsing attributes in process `syz.2.775'.
[   74.657561][ T7708] xt_CHECKSUM: CHECKSUM should be avoided.  If really needed, restrict with "-p udp" and only use in OUTPUT
[   74.677768][ T7708] Cannot find add_set index 4 as target
[   74.723283][ T7717] ipvlan2: entered promiscuous mode
[   74.725698][ T7717] 8021q: adding VLAN 0 to HW filter on device ipvlan2
[   74.740315][ T7717] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond.
[   74.905342][ T7732] xt_CT: No such helper "snmp"
[   74.979533][ T7739] vlan2: entered promiscuous mode
[   74.982199][ T7739] bridge0: entered promiscuous mode
[   75.031661][ T7741] lo speed is unknown, defaulting to 1000
[   75.081035][ T7749] SET target dimension over the limit!
[   75.202358][ T7758] netlink: 40 bytes leftover after parsing attributes in process `syz.1.804'.
[   75.328787][ T7772] lo speed is unknown, defaulting to 1000
[   75.508509][ T7784] netlink: 'syz.0.815': attribute type 7 has an invalid length.
[   75.529060][ T7784] netlink: 'syz.0.815': attribute type 8 has an invalid length.
[   75.538812][ T7784] netlink: 'syz.0.815': attribute type 4 has an invalid length.
[   75.548297][ T7784] netlink: 204 bytes leftover after parsing attributes in process `syz.0.815'.
[   75.764000][ T7772] netlink: 'syz.1.804': attribute type 4 has an invalid length.
[   75.867333][ T7793] wireguard0: entered promiscuous mode
[   75.869324][ T7793] wireguard0: entered allmulticast mode
[   76.046206][ T7803] lo speed is unknown, defaulting to 1000
[   76.217544][ T7804] can: request_module (can-proto-3) failed.
[   76.495674][ T7819] lo speed is unknown, defaulting to 1000
[   77.257683][ T7851] netlink: 8 bytes leftover after parsing attributes in process `syz.0.837'.
[   77.268899][ T7851] netlink: 108 bytes leftover after parsing attributes in process `syz.0.837'.
[   77.307852][ T7852] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   77.428439][ T7866] blkio.reset_stats is deprecated
[   77.576077][ T7882] netlink: 'syz.0.853': attribute type 9 has an invalid length.
[   77.684263][ T7888] netlink: 'syz.1.856': attribute type 9 has an invalid length.
[   77.686825][ T7888] netlink: 211988 bytes leftover after parsing attributes in process `syz.1.856'.
[   77.761404][ T7898] netlink: 36 bytes leftover after parsing attributes in process `syz.0.861'.
[   77.965538][ T7911] netlink: 'syz.2.865': attribute type 10 has an invalid length.
[   77.980032][ T5813] Bluetooth: hci2: command 0x0405 tx timeout
[   77.998027][ T7911] veth0_vlan: left promiscuous mode
[   78.006404][ T7911] veth0_vlan: entered promiscuous mode
[   78.014127][ T7911] team0: Device veth0_vlan failed to register rx_handler
[   78.106913][ T7917] lo speed is unknown, defaulting to 1000
[   78.194771][ T7911] syz.2.865 (7911) used greatest stack depth: 19912 bytes left
[   78.362037][ T7932] netlink: 44 bytes leftover after parsing attributes in process `syz.2.873'.
[   78.881155][ T7978] netlink: 8 bytes leftover after parsing attributes in process `syz.2.895'.
[   79.975785][ T8022] __nla_validate_parse: 2 callbacks suppressed
[   79.975796][ T8022] netlink: 8 bytes leftover after parsing attributes in process `syz.0.916'.
[   79.987157][ T8024] netlink: 12 bytes leftover after parsing attributes in process `syz.2.917'.
[   80.022922][ T8026] netlink: 12 bytes leftover after parsing attributes in process `syz.2.918'.
[   80.059847][ T5813] Bluetooth: hci2: command 0x0405 tx timeout
[   80.083984][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'.
[   80.087157][ T8032] netlink: 8 bytes leftover after parsing attributes in process `syz.0.921'.
[   80.262052][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'.
[   80.265338][ T8054] netlink: 4 bytes leftover after parsing attributes in process `syz.2.932'.
[   80.298222][ T8056] lo: entered promiscuous mode
[   80.300621][ T8056] lo: entered allmulticast mode
[   80.306270][ T8056] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   80.315982][ T7902] lo speed is unknown, defaulting to 1000
[   80.318287][ T7902] syz2: Port: 1 Link DOWN
[   80.393233][ T8070] netlink: 2 bytes leftover after parsing attributes in process `syz.1.941'.
[   80.398588][ T8070] openvswitch: netlink: Flow actions may not be safe on all matching packets.
[   80.554991][ T8088] netlink: 'syz.1.948': attribute type 3 has an invalid length.
[   80.557447][ T8088] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.948'.
[   80.687490][ T8099] netlink: 8 bytes leftover after parsing attributes in process `syz.1.952'.
[   81.431977][   T24] cfg80211: failed to load regulatory.db
[   81.580676][ T8138] lo speed is unknown, defaulting to 1000
[   81.735352][ T8138] netlink: 'syz.0.968': attribute type 4 has an invalid length.
[   81.885417][ T8147] bond_slave_0: entered promiscuous mode
[   81.887489][ T8147] bond_slave_1: entered promiscuous mode
[   81.889368][ T8147] vlan2: entered promiscuous mode
[   81.892200][ T8147] bond0: entered promiscuous mode
[   83.436356][ T8223] netlink: 'syz.2.1006': attribute type 1 has an invalid length.
[   84.069385][ T8256] netlink: 'syz.1.1022': attribute type 1 has an invalid length.
[   84.335235][ T8276] lo speed is unknown, defaulting to 1000
[   84.361473][ T8282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   84.445486][ T8265] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium
[   85.018823][ T8265] syz.2.1027 (8265) used greatest stack depth: 19880 bytes left
[   85.529354][ T8331] __nla_validate_parse: 12 callbacks suppressed
[   85.529365][ T8331] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1055'.
[   85.582815][ T8337] netlink: 'syz.1.1058': attribute type 3 has an invalid length.
[   85.618445][ T8342] netlink: 'syz.0.1061': attribute type 11 has an invalid length.
[   85.621355][ T8342] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1061'.
[   85.652686][ T8345] netlink: 'syz.0.1062': attribute type 1 has an invalid length.
[   85.671012][ T8345] 8021q: adding VLAN 0 to HW filter on device bond2
[   85.703673][ T8345] ipvlan2: entered allmulticast mode
[   85.705401][ T8345] bond2: entered allmulticast mode
[   85.720915][ T8345] bond2: (slave gretap1): making interface the new active one
[   85.723923][ T8345] gretap1: entered allmulticast mode
[   85.726495][ T8345] bond2: (slave gretap1): Enslaving as an active interface with an up link
[   86.621192][ T8410] netlink: 'syz.1.1093': attribute type 2 has an invalid length.
[   86.624416][ T8410] netlink: 'syz.1.1093': attribute type 1 has an invalid length.
[   87.503948][ T8442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1106'.
[   87.895859][ T8478] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1124'.
[   88.073361][ T8498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1134'.
[   88.078550][ T8498] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1134'.
[   88.142536][ T8506] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   88.196637][ T8513] tipc: Enabling of bearer <udp:syz0> rejected, failed to enable media
[   88.238636][ T8516] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1144'.
[   88.314141][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1149'.
[   88.331854][ T8531] policy can only be matched on NF_INET_PRE_ROUTING
[   88.331867][ T8531] unable to load match
[   88.355494][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'.
[   88.360052][ T8535] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1153'.
[   88.489366][ T8549] tipc: Enabled bearer <eth:vlan0>, priority 18
[   88.528713][ T8552] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0
[   88.887782][   T33] audit: type=1800 audit(1751701969.501:2): pid=8568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1166" name="memory.events" dev="tmpfs" ino=2026 res=0 errno=0
[   89.156560][ T8590] ip6erspan0: entered allmulticast mode
[   89.341899][ T8611] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0
[   89.528141][ T8633] netlink: 'syz.2.1197': attribute type 5 has an invalid length.
[   89.537883][ T8633] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0
[   89.543010][ T8633] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0
[   89.546170][ T8633] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0
[   89.549215][ T8633] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0
[   89.553247][ T8633] geneve2: entered promiscuous mode
[   89.555154][ T8633] geneve2: entered allmulticast mode
[   89.600719][   T24] tipc: Node number set to 2210941259
[   90.305296][ T8641] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check.
[   90.574017][ T8665] SET target dimension over the limit!
[   90.697938][ T8683] x_tables: duplicate underflow at hook 4
[   90.719028][ T8683] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0
[   90.722260][ T8683] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0
[   90.725191][ T8683] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0
[   90.728429][ T8683] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0
[   91.101433][ T8723] netlink: 'syz.2.1237': attribute type 1 has an invalid length.
[   91.257677][ T8744] openvswitch: netlink: IP tunnel attribute has 12 unknown bytes.
[   91.294745][ T8750] IPv6: NLM_F_CREATE should be specified when creating new route
[   91.411755][ T8757] __nla_validate_parse: 4 callbacks suppressed
[   91.411772][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1251'.
[   91.647421][ T8789] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1262'.
[   91.776531][ T8809] openvswitch: netlink: Either Ethernet header or EtherType is required.
[   91.912273][    C0] Unknown status report in ack skb
[   92.021014][ T8838] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING
[   92.135997][ T8850] ip6gre1: entered promiscuous mode
[   92.524892][ T8891] netlink: 'syz.2.1310': attribute type 25 has an invalid length.
[   92.528162][ T8891] netlink: 'syz.2.1310': attribute type 7 has an invalid length.
[   92.629692][ T8889] infiniband syz!: set active
[   92.631620][ T8889] infiniband syz!: added team_slave_0
[   92.679601][ T8889] RDS/IB: syz!: added
[   92.683023][ T8889] smc: adding ib device syz! with port count 1
[   92.685362][ T8889] smc:    ib device syz! port 1 has pnetid 
[   92.716960][ T8906] netlink: 'syz.2.1318': attribute type 5 has an invalid length.
[   92.722924][ T8906] netlink: 'syz.2.1318': attribute type 5 has an invalid length.
[   92.794377][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'.
[   92.797388][ T8913] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1321'.
[   92.835900][ T8917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1327'.
[   92.838796][ T8917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1327'.
[   92.843499][ T8917] netlink: 'syz.0.1327': attribute type 13 has an invalid length.
[   93.050247][ T8931] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1330'.
[   93.146551][ T8939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1334'.
[   93.235692][ T8949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1339'.
[   93.326005][ T8962] xt_nfacct: accounting object `syz1' does not exists
[   93.377013][ T8968] tun0: tun_chr_ioctl cmd 1074025677
[   93.379201][ T8968] tun0: linktype set to 778
[   93.787409][ T9018] netlink: 'syz.1.1372': attribute type 1 has an invalid length.
[   93.846942][ T9024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1375'.
[   94.603223][ T9083] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   94.712736][ T9090] netlink: 'syz.2.1405': attribute type 4 has an invalid length.
[   94.873909][ T9102] netdevsim netdevsim2 netdevsim0: entered allmulticast mode
[   95.095541][ T5845] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[   95.103118][ T9119] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[   95.207529][ T9127] lo speed is unknown, defaulting to 1000
[   95.795350][ T9157] netlink: zone id is out of range
[   95.797534][ T9157] netlink: zone id is out of range
[   95.801996][ T9157] netlink: zone id is out of range
[   95.803778][ T9157] netlink: zone id is out of range
[   95.805518][ T9157] netlink: zone id is out of range
[   95.807223][ T9157] netlink: zone id is out of range
[   95.808936][ T9157] netlink: zone id is out of range
[   95.816811][ T9157] netlink: zone id is out of range
[   95.818796][ T9157] netlink: zone id is out of range
[   95.820610][ T9157] netlink: zone id is out of range
[   96.179407][ T9168] team0 (unregistering): left promiscuous mode
[   96.182771][ T9168] team_slave_0: left promiscuous mode
[   96.185016][ T9168] team_slave_1: left promiscuous mode
[   96.188449][ T9168] team_slave_0: left allmulticast mode
[   96.198207][ T9168] team0 (unregistering): Port device team_slave_0 removed
[   96.202201][ T9168] team_slave_1: left allmulticast mode
[   96.209604][ T9168] team0 (unregistering): Port device team_slave_1 removed
[   96.423952][ T9182] netlink: 'syz.2.1447': attribute type 1 has an invalid length.
[   96.426558][ T9182] __nla_validate_parse: 4 callbacks suppressed
[   96.426567][ T9182] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1447'.
[   96.740463][ T9216] tap0: tun_chr_ioctl cmd 1074025677
[   96.742674][ T9216] tap0: linktype set to 769
[   96.765751][ T9218] netlink: 161716 bytes leftover after parsing attributes in process `syz.2.1464'.
[   96.873631][ T9231] netlink: 'syz.0.1470': attribute type 1 has an invalid length.
[   96.917177][ T9235] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1472'.
[   97.034256][ T9251] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1478'.
[   97.307520][ T9274] netlink: 65039 bytes leftover after parsing attributes in process `syz.2.1484'.
[   97.356517][ T9276] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1486'.
[   97.545236][ T9288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1492'.
[   97.809572][ T9305] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1500'.
[   98.181573][ T9344] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1514'.
[   98.187004][ T9344] netlink: 'syz.1.1514': attribute type 7 has an invalid length.
[   98.190323][ T9344] netlink: 'syz.1.1514': attribute type 8 has an invalid length.
[   98.192960][ T9344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1514'.
[   98.318050][ T9358] gretap1: entered promiscuous mode
[   98.323082][ T9358] gretap1: entered allmulticast mode
[   98.464218][ T9374] netlink: 'syz.1.1529': attribute type 1 has an invalid length.
[   98.477144][ T9374] netlink: 'syz.1.1529': attribute type 1 has an invalid length.
[   98.661823][ T9403] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[   99.419932][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[   99.703703][ T9431] Cannot find del_set index 4 as target
[  100.054856][ T5681] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.084046][ T9471] unsupported nlmsg_type 40
[  100.117807][ T5681] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.178509][ T5681] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.225253][ T9474] bridge3: port 1(ip6gretap1) entered blocking state
[  100.228436][ T9474] bridge3: port 1(ip6gretap1) entered disabled state
[  100.234358][ T9474] ip6gretap1: entered allmulticast mode
[  100.238136][ T9474] ip6gretap1: entered promiscuous mode
[  100.258495][ T9474] veth7: entered promiscuous mode
[  100.262328][ T9474] bridge3: port 2(veth7) entered blocking state
[  100.265282][ T9474] bridge3: port 2(veth7) entered disabled state
[  100.268129][ T9474] veth7: entered allmulticast mode
[  100.276358][ T5681] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  100.304623][ T9476] bond2: entered promiscuous mode
[  100.306575][ T9476] 8021q: adding VLAN 0 to HW filter on device bond2
[  100.368742][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1
[  100.372806][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9
[  100.375816][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9
[  100.378851][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4
[  100.382383][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2
[  100.385283][ T9482] netlink: 'syz.2.1581': attribute type 5 has an invalid length.
[  100.424970][ T9481] lo speed is unknown, defaulting to 1000
[  100.436159][ T5681] team0: left allmulticast mode
[  100.443010][ T5681] team_slave_0: left allmulticast mode
[  100.444862][ T5681] team_slave_1: left allmulticast mode
[  100.446597][ T5681] team0: left promiscuous mode
[  100.448099][ T5681] team_slave_0: left promiscuous mode
[  100.452284][ T9487] netlink: 'syz.2.1581': attribute type 1 has an invalid length.
[  100.456941][ T5681] team_slave_1: left promiscuous mode
[  100.460283][ T5681] bridge0: port 3(team0) entered disabled state
[  100.469054][ T5681] bridge_slave_1: left allmulticast mode
[  100.473060][ T5681] bridge_slave_1: left promiscuous mode
[  100.475567][ T5681] bridge0: port 2(bridge_slave_1) entered disabled state
[  100.480335][ T5681] bridge_slave_0: left allmulticast mode
[  100.482193][ T5681] bridge_slave_0: left promiscuous mode
[  100.484111][ T5681] bridge0: port 1(bridge_slave_0) entered disabled state
[  100.764917][ T5681] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  100.773175][ T5681] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  100.778742][ T5681] bond0 (unregistering): Released all slaves
[  100.797199][ T5681] bond1 (unregistering): Released all slaves
[  100.806681][ T5681] bond2 (unregistering): Released all slaves
[  100.978706][ T5681] tipc: Disabling bearer <eth:vlan0>
[  100.989089][ T5681] tipc: Left network mode
[  102.078419][ T9510] __nla_validate_parse: 10 callbacks suppressed
[  102.078465][ T9510] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1585'.
[  102.088385][ T9510] Bluetooth: MGMT ver 1.23
[  102.169495][ T9481] chnl_net:caif_netlink_parms(): no params data found
[  102.271138][ T9526] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration
[  102.469963][ T5813] Bluetooth: hci0: command tx timeout
[  102.492067][ T5681] hsr_slave_0: left promiscuous mode
[  102.500074][ T5681] hsr_slave_1: left promiscuous mode
[  102.505763][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  102.508946][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_0
[  102.521682][ T5681] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  102.524751][ T5681] batman_adv: batadv0: Removing interface: batadv_slave_1
[  102.555793][ T5681] veth1_macvtap: left promiscuous mode
[  102.558292][ T5681] veth0_macvtap: left promiscuous mode
[  102.566540][ T5681] veth1_vlan: left promiscuous mode
[  102.568902][ T5681] veth0_vlan: left promiscuous mode
[  102.894813][ T5681] team0 (unregistering): Port device team_slave_1 removed
[  102.924552][ T5681] team0 (unregistering): Port device team_slave_0 removed
[  102.928370][   T26] smc: removing ib device syz!
[  103.246532][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state
[  103.261485][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state
[  103.264526][ T9481] bridge_slave_0: entered allmulticast mode
[  103.268405][ T9481] bridge_slave_0: entered promiscuous mode
[  103.287216][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state
[  103.294503][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state
[  103.298185][ T9481] bridge_slave_1: entered allmulticast mode
[  103.304947][ T9481] bridge_slave_1: entered promiscuous mode
[  103.402858][ T9536] netlink: 'syz.0.1592': attribute type 1 has an invalid length.
[  103.406091][ T9536] netlink: 224 bytes leftover after parsing attributes in process `syz.0.1592'.
[  103.428846][ T9481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link
[  103.443364][ T9481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link
[  103.622256][ T9481] team0: Port device team_slave_0 added
[  103.677766][ T9481] team0: Port device team_slave_1 added
[  103.815543][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_0
[  103.817735][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.832794][ T9556] x_tables: unsorted entry at hook 2
[  103.833762][ T9481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active
[  103.887469][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_1
[  103.903086][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem.
[  103.915547][ T9481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active
[  103.948196][ T5681] IPVS: stop unused estimator thread 0...
[  104.054844][ T9481] hsr_slave_0: entered promiscuous mode
[  104.057206][ T9481] hsr_slave_1: entered promiscuous mode
[  104.151044][ T9563] netlink: 'syz.0.1601': attribute type 8 has an invalid length.
[  104.164245][ T9563] gretap0: left allmulticast mode
[  104.165895][ T9563] gretap0: left promiscuous mode
[  104.168374][ T9563] bridge0: port 3(gretap0) entered disabled state
[  104.175852][ T9563] bridge_slave_0: left allmulticast mode
[  104.177683][ T9563] bridge_slave_0: left promiscuous mode
[  104.179547][ T9563] bridge0: port 1(bridge_slave_0) entered disabled state
[  104.203759][ T9563] bridge_slave_1: left allmulticast mode
[  104.205846][ T9563] bridge_slave_1: left promiscuous mode
[  104.208733][ T9563] bridge0: port 2(bridge_slave_1) entered disabled state
[  104.241370][ T9563] bond0: (slave bond_slave_0): Releasing backup interface
[  104.248302][ T9563] bond0: (slave bond_slave_1): Releasing backup interface
[  104.269371][ T9563] team0: Port device team_slave_0 removed
[  104.281364][ T9563] team0: Port device team_slave_1 removed
[  104.291679][ T9563] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  104.295649][ T9563] batman_adv: batadv0: Removing interface: batadv_slave_0
[  104.301483][ T9563] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  104.304721][ T9563] batman_adv: batadv0: Removing interface: batadv_slave_1
[  104.322089][ T9563] bond2: (slave gretap1): Releasing active interface
[  104.324884][ T9563] gretap1: left allmulticast mode
[  104.542678][ T5813] Bluetooth: hci0: command tx timeout
[  104.729350][ T9600] netlink: 'syz.2.1612': attribute type 1 has an invalid length.
[  104.744927][ T9600] netlink: 208 bytes leftover after parsing attributes in process `syz.2.1612'.
[  104.911519][ T9481] netdevsim netdevsim1 netdevsim0: renamed from eth0
[  104.918786][ T9481] netdevsim netdevsim1 netdevsim1: renamed from eth1
[  104.927338][ T9481] netdevsim netdevsim1 netdevsim2: renamed from eth2
[  104.936870][ T9481] netdevsim netdevsim1 netdevsim3: renamed from eth3
[  105.097192][ T9481] 8021q: adding VLAN 0 to HW filter on device bond0
[  105.115796][ T9481] 8021q: adding VLAN 0 to HW filter on device team0
[  105.122633][   T28] bridge0: port 1(bridge_slave_0) entered blocking state
[  105.125626][   T28] bridge0: port 1(bridge_slave_0) entered forwarding state
[  105.142626][   T28] bridge0: port 2(bridge_slave_1) entered blocking state
[  105.145023][   T28] bridge0: port 2(bridge_slave_1) entered forwarding state
[  105.263519][ T9481] 8021q: adding VLAN 0 to HW filter on device batadv0
[  105.287541][ T9481] veth0_vlan: entered promiscuous mode
[  105.295503][ T9481] veth1_vlan: entered promiscuous mode
[  105.318156][ T9481] veth0_macvtap: entered promiscuous mode
[  105.323426][ T9481] veth1_macvtap: entered promiscuous mode
[  105.345886][ T9481] batman_adv: batadv0: Interface activated: batadv_slave_0
[  105.362926][ T9481] batman_adv: batadv0: Interface activated: batadv_slave_1
[  105.378538][ T9481] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0
[  105.383654][ T9481] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0
[  105.387386][ T9481] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0
[  105.392689][ T9481] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0
[  105.586485][   T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.589055][   T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.614785][   T26] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50
[  105.617687][   T26] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50
[  105.911986][ T9650] wg1: entered promiscuous mode
[  105.913684][ T9650] wg1: entered allmulticast mode
[  106.416718][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1638'.
[  106.421838][ T9689] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1638'.
[  106.606817][ T9707] IPVS: length: 173 != 8
[  106.702241][ T9713] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1650'.
[  106.705948][ T9713] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1650'.
[  106.709469][ T9713] netlink: 'syz.2.1650': attribute type 14 has an invalid length.
[  106.728925][ T9713] netlink: 'syz.2.1650': attribute type 13 has an invalid length.
[  106.820771][ T9721] netlink: 'syz.0.1654': attribute type 9 has an invalid length.
[  107.614261][ T9752] netlink: 168 bytes leftover after parsing attributes in process `syz.2.1669'.
[  107.659950][    C0] ip6_tunnel: ip6tnl2 xmit: Local address not yet configured!
[  107.682879][ T9754] 
[  107.683922][ T9754] ======================================================
[  107.686763][ T9754] WARNING: possible circular locking dependency detected
[  107.689567][ T9754] 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 Not tainted
[  107.693722][ T9754] ------------------------------------------------------
[  107.696580][ T9754] syz.2.1670/9754 is trying to acquire lock:
[  107.699024][ T9754] ffff888020aa9988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  107.703481][ T9754] 
[  107.703481][ T9754] but task is already holding lock:
[  107.706476][ T9754] ffff888020aa9a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  107.710333][ T9754] 
[  107.710333][ T9754] which lock already depends on the new lock.
[  107.710333][ T9754] 
[  107.714530][ T9754] 
[  107.714530][ T9754] the existing dependency chain (in reverse order) is:
[  107.718117][ T9754] 
[  107.718117][ T9754] -> #2 (&nbd->config_lock){+.+.}-{4:4}:
[  107.721345][ T9754]        lock_acquire+0x120/0x360
[  107.723548][ T9754]        __mutex_lock+0x182/0xe80
[  107.725717][ T9754]        refcount_dec_and_mutex_lock+0x30/0xa0
[  107.727675][ T9754]        nbd_config_put+0x2c/0x790
[  107.729318][ T9754]        nbd_release+0xfe/0x140
[  107.730888][ T9754]        bdev_release+0x536/0x650
[  107.732605][ T9754]        blkdev_release+0x15/0x20
[  107.734318][ T9754]        __fput+0x44c/0xa70
[  107.735789][ T9754]        fput_close_sync+0x119/0x200
[  107.737570][ T9754]        __x64_sys_close+0x7f/0x110
[  107.739636][ T9754]        do_syscall_64+0xfa/0x3b0
[  107.741290][ T9754]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.743346][ T9754] 
[  107.743346][ T9754] -> #1 (&disk->open_mutex){+.+.}-{4:4}:
[  107.745849][ T9754]        lock_acquire+0x120/0x360
[  107.747538][ T9754]        __mutex_lock+0x182/0xe80
[  107.749209][ T9754]        __del_gendisk+0x129/0x9e0
[  107.750844][ T9754]        del_gendisk+0xe8/0x160
[  107.752456][ T9754]        nbd_dev_remove_work+0x47/0xe0
[  107.754481][ T9754]        process_scheduled_works+0xae1/0x17b0
[  107.756720][ T9754]        worker_thread+0x8a0/0xda0
[  107.758638][ T9754]        kthread+0x711/0x8a0
[  107.760108][ T9754]        ret_from_fork+0x3fc/0x770
[  107.761726][ T9754]        ret_from_fork_asm+0x1a/0x30
[  107.763414][ T9754] 
[  107.763414][ T9754] -> #0 (&set->update_nr_hwq_lock){++++}-{4:4}:
[  107.766062][ T9754]        validate_chain+0xb9b/0x2140
[  107.767802][ T9754]        __lock_acquire+0xab9/0xd20
[  107.769459][ T9754]        lock_acquire+0x120/0x360
[  107.771067][ T9754]        down_write+0x96/0x1f0
[  107.772642][ T9754]        blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  107.774628][ T9754]        nbd_start_device+0x16c/0xac0
[  107.776390][ T9754]        nbd_genl_connect+0x1250/0x1930
[  107.778308][ T9754]        genl_family_rcv_msg_doit+0x215/0x300
[  107.780259][ T9754]        genl_rcv_msg+0x60e/0x790
[  107.782018][ T9754]        netlink_rcv_skb+0x208/0x470
[  107.783913][ T9754]        genl_rcv+0x28/0x40
[  107.785479][ T9754]        netlink_unicast+0x75b/0x8d0
[  107.787390][ T9754]        netlink_sendmsg+0x805/0xb30
[  107.789085][ T9754]        __sock_sendmsg+0x21c/0x270
[  107.790798][ T9754]        ____sys_sendmsg+0x505/0x830
[  107.792510][ T9754]        ___sys_sendmsg+0x21f/0x2a0
[  107.794254][ T9754]        __x64_sys_sendmsg+0x19b/0x260
[  107.795971][ T9754]        do_syscall_64+0xfa/0x3b0
[  107.797765][ T9754]        entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.799772][ T9754] 
[  107.799772][ T9754] other info that might help us debug this:
[  107.799772][ T9754] 
[  107.802883][ T9754] Chain exists of:
[  107.802883][ T9754]   &set->update_nr_hwq_lock --> &disk->open_mutex --> &nbd->config_lock
[  107.802883][ T9754] 
[  107.807346][ T9754]  Possible unsafe locking scenario:
[  107.807346][ T9754] 
[  107.809929][ T9754]        CPU0                    CPU1
[  107.811744][ T9754]        ----                    ----
[  107.813493][ T9754]   lock(&nbd->config_lock);
[  107.814985][ T9754]                                lock(&disk->open_mutex);
[  107.817254][ T9754]                                lock(&nbd->config_lock);
[  107.819578][ T9754]   lock(&set->update_nr_hwq_lock);
[  107.821209][ T9754] 
[  107.821209][ T9754]  *** DEADLOCK ***
[  107.821209][ T9754] 
[  107.823790][ T9754] 3 locks held by syz.2.1670/9754:
[  107.825412][ T9754]  #0: ffffffff8f576170 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40
[  107.828229][ T9754]  #1: ffffffff8f575f88 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790
[  107.831098][ T9754]  #2: ffff888020aa9a30 (&nbd->config_lock){+.+.}-{4:4}, at: nbd_genl_connect+0x94f/0x1930
[  107.834468][ T9754] 
[  107.834468][ T9754] stack backtrace:
[  107.836755][ T9754] CPU: 1 UID: 0 PID: 9754 Comm: syz.2.1670 Not tainted 6.16.0-rc3-syzkaller-00159-g223e2288f4b8-dirty #0 PREEMPT(full) 
[  107.836767][ T9754] Hardware name: QEMU Standard PC (Q35 + ICH9, 2009), BIOS 1.16.2-debian-1.16.2-1 04/01/2014
[  107.836772][ T9754] Call Trace:
[  107.836777][ T9754]  <TASK>
[  107.836783][ T9754]  dump_stack_lvl+0x189/0x250
[  107.836800][ T9754]  ? __pfx_dump_stack_lvl+0x10/0x10
[  107.836813][ T9754]  ? __pfx__printk+0x10/0x10
[  107.836822][ T9754]  ? print_lock_name+0xde/0x100
[  107.836831][ T9754]  print_circular_bug+0x2ee/0x310
[  107.836841][ T9754]  check_noncircular+0x134/0x160
[  107.836850][ T9754]  validate_chain+0xb9b/0x2140
[  107.836863][ T9754]  __lock_acquire+0xab9/0xd20
[  107.836875][ T9754]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  107.836888][ T9754]  lock_acquire+0x120/0x360
[  107.836900][ T9754]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  107.836911][ T9754]  ? __mutex_unlock_slowpath+0x1cd/0x700
[  107.836928][ T9754]  ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10
[  107.836938][ T9754]  down_write+0x96/0x1f0
[  107.836945][ T9754]  ? blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  107.836957][ T9754]  ? __pfx_down_write+0x10/0x10
[  107.836970][ T9754]  blk_mq_update_nr_hw_queues+0x3b/0x14c0
[  107.836985][ T9754]  ? nbd_add_socket+0x688/0x9a0
[  107.837004][ T9754]  ? nbd_add_socket+0x688/0x9a0
[  107.837020][ T9754]  nbd_start_device+0x16c/0xac0
[  107.837035][ T9754]  ? __nla_parse+0x40/0x60
[  107.837049][ T9754]  nbd_genl_connect+0x1250/0x1930
[  107.837067][ T9754]  ? __pfx_nbd_genl_connect+0x10/0x10
[  107.837082][ T9754]  ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0
[  107.837100][ T9754]  ? __nla_parse+0x40/0x60
[  107.837117][ T9754]  ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0
[  107.837134][ T9754]  genl_family_rcv_msg_doit+0x215/0x300
[  107.837152][ T9754]  ? __pfx_genl_family_rcv_msg_doit+0x10/0x10
[  107.837174][ T9754]  genl_rcv_msg+0x60e/0x790
[  107.837191][ T9754]  ? __pfx_genl_rcv_msg+0x10/0x10
[  107.837204][ T9754]  ? __pfx_nbd_genl_connect+0x10/0x10
[  107.837221][ T9754]  netlink_rcv_skb+0x208/0x470
[  107.837232][ T9754]  ? __pfx_genl_rcv_msg+0x10/0x10
[  107.837245][ T9754]  ? __pfx_netlink_rcv_skb+0x10/0x10
[  107.837260][ T9754]  ? down_read+0x1ad/0x2e0
[  107.837269][ T9754]  genl_rcv+0x28/0x40
[  107.837283][ T9754]  netlink_unicast+0x75b/0x8d0
[  107.837296][ T9754]  netlink_sendmsg+0x805/0xb30
[  107.837311][ T9754]  ? __pfx_netlink_sendmsg+0x10/0x10
[  107.837323][ T9754]  ? aa_sock_msg_perm+0x94/0x160
[  107.837337][ T9754]  ? bpf_lsm_socket_sendmsg+0x9/0x20
[  107.837352][ T9754]  ? __pfx_netlink_sendmsg+0x10/0x10
[  107.837391][ T9754]  __sock_sendmsg+0x21c/0x270
[  107.837413][ T9754]  ____sys_sendmsg+0x505/0x830
[  107.837431][ T9754]  ? __pfx_____sys_sendmsg+0x10/0x10
[  107.837449][ T9754]  ? import_iovec+0x74/0xa0
[  107.837463][ T9754]  ___sys_sendmsg+0x21f/0x2a0
[  107.837479][ T9754]  ? __pfx____sys_sendmsg+0x10/0x10
[  107.837506][ T9754]  ? __fget_files+0x2a/0x420
[  107.837521][ T9754]  ? __fget_files+0x3a0/0x420
[  107.837539][ T9754]  __x64_sys_sendmsg+0x19b/0x260
[  107.837554][ T9754]  ? __pfx___x64_sys_sendmsg+0x10/0x10
[  107.837574][ T9754]  ? __sys_socketpair+0x4a9/0x560
[  107.837587][ T9754]  ? do_syscall_64+0xbe/0x3b0
[  107.837600][ T9754]  do_syscall_64+0xfa/0x3b0
[  107.837609][ T9754]  ? lockdep_hardirqs_on+0x9c/0x150
[  107.837626][ T9754]  ? entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.837638][ T9754]  ? exc_page_fault+0x9f/0xf0
[  107.837653][ T9754]  entry_SYSCALL_64_after_hwframe+0x77/0x7f
[  107.837665][ T9754] RIP: 0033:0x7f7830b8e929
[  107.837677][ T9754] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48
[  107.837687][ T9754] RSP: 002b:00007f782e9f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e
[  107.837700][ T9754] RAX: ffffffffffffffda RBX: 00007f7830db5fa0 RCX: 00007f7830b8e929
[  107.837709][ T9754] RDX: 0000000020000000 RSI: 0000200000001ac0 RDI: 0000000000000007
[  107.837717][ T9754] RBP: 00007f7830c10b39 R08: 0000000000000000 R09: 0000000000000000
[  107.837724][ T9754] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000
[  107.837731][ T9754] R13: 0000000000000000 R14: 00007f7830db5fa0 R15: 00007ffdbbdd3288
[  107.837744][ T9754]  </TASK>
SYZFAIL: failed to recv rpc
fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor)
[  108.065326][ T5845] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  108.360833][   T56] block nbd0: Receive control failed (result -32)
[  109.644083][ T5845] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.705246][ T5845] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.765072][ T5845] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0
[  109.849335][ T5845] bridge_slave_1: left allmulticast mode
[  109.851578][ T5845] bridge_slave_1: left promiscuous mode
[  109.853750][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state
[  109.857253][ T5845] bridge_slave_0: left allmulticast mode
[  109.859371][ T5845] bridge_slave_0: left promiscuous mode
[  109.861536][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state
[  109.926756][ T5845] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface
[  109.930982][ T5845] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface
[  109.934242][ T5845] bond0 (unregistering): Released all slaves
[  110.091539][ T5845] hsr_slave_0: left promiscuous mode
[  110.094294][ T5845] hsr_slave_1: left promiscuous mode
[  110.096908][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_0
[  110.100088][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_0
[  110.103760][ T5845] batman_adv: batadv0: Interface deactivated: batadv_slave_1
[  110.106782][ T5845] batman_adv: batadv0: Removing interface: batadv_slave_1
[  110.114100][ T5845] veth1_macvtap: left promiscuous mode
[  110.116276][ T5845] veth0_macvtap: left promiscuous mode
[  110.118490][ T5845] veth1_vlan: left promiscuous mode
[  110.120795][ T5845] veth0_vlan: left promiscuous mode
[  110.206918][ T5845] team0 (unregistering): Port device team_slave_1 removed
[  110.226329][ T5845] team0 (unregistering): Port device team_slave_0 removed

VM DIAGNOSIS:
07:53:08  Registers:
info registers vcpu 0

CPU#0
RAX=0000000000000018 RBX=00007ffcf983c670 RCX=0000000000000000 RDX=000000000000000a
RSI=00007ffcf983c608 RDI=0000000000000043 RBP=0000000000000018 RSP=00007ffcf983c0f8
R8 =0000000000000000 R9 =0000000000000000 R10=00000000ffffffff R11=0000000000000043
R12=0000000000000064 R13=00007ffcf983e7b0 R14=00007ffcf983c608 R15=0000000000000043
RIP=00007f57a37a9630 RFL=00000216 [----AP-] CPL=3 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0033 0000000000000000 ffffffff 00a0fb00 DPL=3 CS64 [-RA]
SS =002b 0000000000000000 ffffffff 00c0f300 DPL=3 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 000055558bfc2500 ffffffff 00c00000
GS =0000 0000000000000000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe0000003000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000001000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007ffcf983c690 CR3=000000003d3c7000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=6874697720646574 69786520706f6f6c XMM01=2073757461747320 6874697720646574
XMM02=0000000000000000 0000000000000000 XMM03=000000000000ff00 0000000000ff0000
XMM04=00000000ff000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
info registers vcpu 1

CPU#1
RAX=0000000000000039 RBX=0000000000000039 RCX=0000000000000000 RDX=00000000000003f8
RSI=000000000000136f RDI=0000000000001370 RBP=00000000000003f8 RSP=ffffc90004d56710
R8 =ffff888108a58237 R9 =1ffff1102114b046 R10=dffffc0000000000 R11=ffffffff85474610
R12=dffffc0000000000 R13=ffffffff99ac48f1 R14=ffffffff99dc9760 R15=0000000000000000
RIP=ffffffff8547468c RFL=00000002 [-------] CPL=0 II=0 A20=1 SMM=0 HLT=0
ES =0000 0000000000000000 ffffffff 00c00000
CS =0010 0000000000000000 ffffffff 00a09b00 DPL=0 CS64 [-RA]
SS =0018 0000000000000000 ffffffff 00c09300 DPL=0 DS   [-WA]
DS =0000 0000000000000000 ffffffff 00c00000
FS =0000 00007f782e9f66c0 ffffffff 00c00000
GS =0000 ffff8881a3c50000 ffffffff 00c00000
LDT=0000 0000000000000000 ffffffff 00c00000
TR =0040 fffffe000004a000 00004087 00008b00 DPL=0 TSS64-busy
GDT=     fffffe0000048000 0000007f
IDT=     fffffe0000000000 00000fff
CR0=80050033 CR2=00007f7830b74980 CR3=0000000029eb4000 CR4=000006f0
DR0=0000000000000000 DR1=0000000000000000 DR2=0000000000000000 DR3=0000000000000000 
DR6=00000000fffe0ff0 DR7=0000000000000400
EFER=0000000000000d01
FCW=037f FSW=0000 [ST=0] FTW=00 MXCSR=00001f80
FPR0=0000000000000000 0000 FPR1=0000000000000000 0000
FPR2=0000000000000000 0000 FPR3=0000000000000000 0000
FPR4=0000000000000000 0000 FPR5=0000000000000000 0000
FPR6=0000000000000000 0000 FPR7=0000000000000000 0000
XMM00=0000000000000000 00000000000001a4 XMM01=0000000000000000 0000000000000000
XMM02=0000000000000000 0000000000000000 XMM03=0000000000000000 0000000000000000
XMM04=0000000000000000 0000000000000000 XMM05=0000000000000000 0000000000000000
XMM06=0000000000000000 0000000000000000 XMM07=0000000000000000 0000000000000000
XMM08=0000000000000000 0000000000000000 XMM09=0000000000000000 0000000000000000
XMM10=0000000000000000 0000000000000000 XMM11=0000000000000000 0000000000000000
XMM12=0000000000000000 0000000000000000 XMM13=0000000000000000 0000000000000000
XMM14=0000000000000000 0000000000000000 XMM15=0000000000000000 0000000000000000
